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Publi c Affairs Guidance 


l PP' c: Going Dark and Encryption 


Press Guidance: 

Talking Points and Q & A's below are for internal uso only, Use these to assist 

thTfo r rmat SA Field°nlff erS ^ * 0 ? intervi 1 f ws or inquiries. Do not disseminate this paper in 
. e ^ Offices media reps should handle all local media queries. Calls referrina 

to cases of a national significance rp n be referred to NPO Ud ^ |or pas 9 


Background: 


O & As: 


Hasthe Going Dark problem gotten worse for law enforcement over the past year? 


The impediments faced by law enforcement have been getting worse for quite some time 
The Communications Assistance for Law Enforcement Act (CALEA) was enacted in 1904 anil 

ove P r mtem y et pSoioU^ln s COmmUniC ^° nS p “ ° f intercoTn^ Voice 

ac ^ services, and providers of broadband access services Tnrlav 

housands of companies provide some form of communication serelcf and are not 
required by statute to develop lawful Intercept capabilities for law enforcement. As a result, 
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many of today's communication services are developed and deployed without consideration 
of law enforcement's lawful intercept and evidence collection needs consideration 

delude encrvDtion that'thp 0 ^ announcement from Apple that their phones will 
court n 1- ® COmpany ,s not able to unlock, even in response to a 

court order? How will this impact the FBI's investigative abilities? 

? be extremely concerned about the serious threat posed by the 
increasing proliferation of encryption technology that prevents timely access to critical 

a~e°f^du5 > “ 9h 16931 r°“ SS - UW e " f °“ needs the cooperahoTand 
ssistance from industry in complying with lawful court orders so that criminals around the 
world cannot seek safe haven for lawless conduct. criminals around the 

What about workarounds? Can't law enforcement retrieve the same information 
through metadata, the Cloud, or through guessing the password on the phone? 

^ bi ' e ' aw enforcement may be able to obtain some information from communications 
fnformaSonls^ diffirni?^ telephor ! e records ' email lo 9 Sy an d location information, that 

“ en time iS ° f the and does " ot P™ lda * a 

The FBI may be able to access data stored in the Cloud with a search warrant But backina 

phoTe“ p!oo tab,«r?h d0es " 0t a " ° f tha stored data a p“r device e g! 

» aptop ' fc ? b *?/ Tbe missin 9 information can create a black hole for law enforcement 
If a device ,s not routinely backed up to the Cloud, or if a target opts out of backing uo to 
the Cloud, some of the data can only be found on the encrypted device P 

many 9 Whereby da * is erased after too 

S^tT^ ieS P ! Y Cl ° Se attention t0 law enforcement's diminishing set of capabilities 
and continually seek ways to exploit the gaps. It is vital that capabilities to access the types 

maintained! 0 " *° P ' 0teCt the PUb " C Safety and national “curity of our country are 

ast retuhifi'f. af^ d a " y r ??V“ d “»Pe™«o" from communication providers 
as a result of the disclosures attributed to Edward Snowden? 

number ° f the country's largest providers have been openly vocal about their 
concerns regarding surveillance and have published an open letter to the President and 

5* , P ° ISSUe Wlth ,hasa ,o 

ep/ng users data secure — deploying the latest encryption technoloav to orevent 

unauthorized survetl/ance on our networks and by pushing back on government requests to 
ensure that they are legal and reasonable in scope " government requests to 

What is missing is a vigorous commitment to assist law enforcement when electronic 
urvei ance of a specific criminal target is authorized pursuant to court order. 

What is needed is an open and frank dialogue about the responsibilities of industry to accici- 
l l dUS ^ and ,aw enforce ment need to move fbn!Ja!?and dJ3j,^ 
m?hnr^ k Und6r r hlCh b ° th S,des P artici P ate in striking an appropriate balance amonq the 

apd ip — ■ aad 

Why does law enforcement believe companies should be forced to build in 
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companies?' ,hen des ' 9n ‘ n9 services? Don't backdoors pose a security risk for 

ilf/'' 00 that building a lawful intercept solution into a system requires a 
so-called back door, one that foreign adversaries and hackers may try to exploit. Law 

thl fmnTHnni 5 "S-h 8 ^-*" 9 advocating for a back door - Law enforcement wants to use 
Fm d °° r ' Wlth C anty and transparency, and with clear guidance provided by law 

p re ve n t°te r ro ri st^a tta'clfs 6VidenCe and information needed to investigate crime and 

secu^SfhvH Wi ". eXPl0it ! ny VUlnerability they find - makes more sense to address 
security risks by developing intercept solutions during the design/development phase 

after e th^ a farr eS <? rtl h n9 patchwork solution when law enforcement serves a court order 
ter the fact. Such solutions are likely to be better, smarter, cheaper, and more secure 
than solutions that are retrofitted to existing products. 

t0 , s ! ress that an open ' transparent process for identifying technical 
capabilities benefits everyone. First, the public can be assured law enforcement is not 
skmg for new authorities. Rather, law enforcement is advocating that industry be able to 
? Urt rs jf! ued » ursuant <*“"9 legal authorities. Second the fndustry 

Dlavtn^fiP^ t Th e H P< ? nSlbl ‘? es and aN prov,ders are he,d to the same standard (i.e., a level 
playmg field). Third, law enforcement can be confident that it will receive what it needs and 
is authorized by law to collect, regardless of the specific service provider. 

I!?™ « -n ny c ° mpa " ies or applications does the FBI encounter where you know 
they will not provide real time data? 

L h r are bundreds of communication service providers that offer new services that do not 
ave a lawful intercept capability. This number continues to grow as technology continues to 
Some providers of new services may have a partial capability to provide data 
periodically. However, the capabilities are incomplete in that they do not provide all the 

rlnlUlrr I** law ^enforcement is authorized. Further, some of these partial 

capabilities cannot provide information in real-time. 

It has been reported the government receives a daily dump of screen shots from 
companies. Why is this not good enough? screen snots rrom 

daHvrpnnr^nf subject to legal process, it may be sufficient that law enforcement receives a 
mpnnlr P rt of a target s '"formation. But in many instances, information provided in this 
manner is incomplete or not provided in a timely manner to support every type of 

Hlfnrfinn 1 '!! 6 repui £: r V ent ' especially when dealing with reactive crimes (e.g., kidnapping, 
th . ' trafficking, terrorism). Also, not every company has this capability. Further 

enforr^mpnT l C ?h dlSparity , in what companies offering similar services can provide to law 
enforcement there is simply a lack of consistency across the board. 

und^TL F 3 faV ,° r " eW e J ectronic surve iHance capability laws or see a need to 
update existing laws such as CALEA? 

I"“ rtam res P e cts, today's ever-widening gap between technology and law enforcement's 
electronic surveil ance capabilities is not a new phenomenon. For decades, law enforcement 
has struggled to keep pace with evolving communications technology, periodically requirinq 

rernties S Thp J n ff erVentl ? n H t0 31 ' 9 u ' 9W enforcement capabilities with new technological 
realities. The difference today is the sheer pace at which communications technology is 

advancing. Each passing year brings a dramatic increase in the volume of communications, 
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rnmmMni? l ? atl0n and com P |exity of communications service offerings, the number of 
communications service providers, and the use of encryption. 

i^ h wfn| a ini teCh ? 0l ° 9 f fue ! in9 thiS rapid innovation ' however, is simultaneously making 
wful interception of modern communications services increasingly less feasible Unless 

bemm^ohtn 'T ' ! taken ; lawful intercept capabilities will continue to erode and potentially 
become obsolete. Law enforcement needs assistance and cooperation from companies to 

whTi^ SM' T rt H rderS a . d haS t0 haVe 3 W3y t0 he,p these companies understand 

whnl ci-m d f „ hy * needS and how they can assist AI1 of this can be accomplished 
while still protecting privacy rights and providing network security and innovation. 

How will passage of the Domestic Retention and Investigatory Powers (DRIP) 
legislation in the United Kingdom, which requires companies to retain customer 
communications data, impact the Going Dark problem in the US? 

It is premature to comment on how the UK legislation will impact United States law 

l n r ^ r n Cament . s ab, ' lty t0 effect court orders. However, it does reflect the fact that the UK is 
facing a similarly daunting challenge in conducting electronic surveillance. 

For any additional questions, including the FBI's use of show cause orders when 
companies refuse to comply with a court order, or the FBI's National Domestic 
Communications Assistance Center, please refer to headquarters. 


